Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
File: 1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft (raw, json)
Hash identifier: 2dQXKnaYrgmTI3H3dsrnl/GlkM+r5eukvjzJChANfz0=
Subject key identifier: FA:E2:17:E3:28:11:F8:7A:CC:FE:2F:3F:8D:40:1D:3A:07:6A:7E:EC
Authority key identifier: FA:6D:F5:3C:9F:D2:C5:FC:74:F1:DB:71:83:4D:7E:46:A7:6E:91:D7
Certificate issuer: /CN=fa6df53c9fd2c5fc74f1db71834d7e46a76e91d7
Certificate serial: 01A1CB8DD0C2EC537F297FAE017D95E0BB39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
Manifest number: 137F
Signing time: Wed 11 Nov 2026 17:00:31 +0000
Manifest this update: Wed 11 Nov 2026 17:00:31 +0000
Manifest next update: Thu 12 Nov 2026 17:00:31 +0000
Files and hashes: 1: 1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl (hash: CULiA/VU9VvJusMsbon4MW6tMU8SG7XD668fF/bWd6M=)
2: SKcH6GqAnwSkb7fUKCyzsH2pE4c.roa (hash: FlzY0BJvsluyy6RMybQuGpqHaLrEW1okMJt3+ASEjLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 14:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cb:8d:d0:c2:ec:53:7f:29:7f:ae:01:7d:95:e0:bb:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa6df53c9fd2c5fc74f1db71834d7e46a76e91d7
Validity
Not Before: Nov 11 17:00:31 2026 GMT
Not After : Nov 12 17:00:31 2026 GMT
Subject: CN=fae217e32811f87accfe2f3f8d401d3a076a7eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e9:a7:a4:53:b1:80:0d:63:96:3e:bc:46:41:
ed:b3:bc:39:e4:0a:f8:35:c1:1f:08:51:12:71:9e:
26:50:3e:81:29:b3:a0:2d:c6:5b:99:17:f7:a3:9e:
1b:39:3b:6f:a1:91:9c:e4:77:57:fd:cf:33:f5:a2:
cb:d4:1d:ad:ee:07:03:4d:5e:34:bd:a4:c9:00:fa:
98:85:b9:44:45:68:03:53:35:a3:30:bd:7c:59:96:
95:49:79:2e:80:82:21:1e:89:8d:4d:80:a4:9b:49:
27:52:3e:ba:52:7a:f3:db:5c:d8:1a:df:ce:7f:38:
8d:ae:1d:bf:62:22:7c:96:c3:0d:cb:c1:e4:bc:cd:
76:38:77:24:ad:78:52:12:07:18:d3:02:c9:97:df:
ec:49:5d:13:d8:4f:d3:81:2f:34:ad:15:8d:7a:1f:
f6:e4:86:43:8a:c4:56:4b:33:00:88:4b:59:99:a6:
13:db:b9:14:8e:74:e4:f6:d8:71:85:f6:8b:25:b1:
64:9b:9b:4c:52:88:b3:92:6b:f9:a6:d3:4b:b6:56:
a0:a2:17:6d:c8:58:29:7e:01:9e:a7:05:24:13:3b:
82:75:06:f2:c0:df:60:b5:c7:eb:31:e0:f3:6d:e0:
07:23:ac:e3:c2:b2:1d:29:92:a0:fe:64:d4:94:6f:
c7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E2:17:E3:28:11:F8:7A:CC:FE:2F:3F:8D:40:1D:3A:07:6A:7E:EC
X509v3 Authority Key Identifier:
keyid:FA:6D:F5:3C:9F:D2:C5:FC:74:F1:DB:71:83:4D:7E:46:A7:6E:91:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:bf:c9:df:84:fc:5f:ac:30:c7:cd:b5:23:23:2d:86:fc:19:
75:34:a6:8f:c3:4d:ae:98:6d:0d:eb:0c:6f:52:d6:9d:ea:83:
75:29:59:4d:cf:11:42:d9:b3:23:ee:0a:40:9a:1a:05:54:84:
23:ec:d1:c4:0f:c6:6f:43:82:cc:dc:9f:7b:a5:16:e0:7a:2f:
21:c1:4e:5b:65:08:39:8a:0f:a2:43:fa:96:19:3f:5d:c7:c4:
69:f5:d9:9e:ff:24:48:96:2f:44:f6:7c:b9:27:92:c7:e3:65:
41:9c:fa:ca:3d:55:64:76:16:2c:7e:51:7a:55:d8:54:ed:43:
79:17:19:8f:9a:b8:42:a3:1b:df:21:0b:a6:98:81:85:4a:6a:
bb:8a:9a:33:7b:c5:ff:08:2e:23:f3:b8:3c:4b:3c:50:93:fa:
0b:04:9e:cf:bf:36:ab:19:07:07:57:34:ec:ca:60:cc:a6:6e:
9a:10:39:ad:6f:d1:2e:32:78:63:ae:a0:ca:85:9e:17:7c:80:
3a:8a:ef:cf:a7:8f:7c:f9:d1:a7:75:db:a7:be:34:e1:a2:a7:
1e:1d:44:34:ee:de:f6:52:1d:40:be:34:f1:23:f8:58:5b:42:
d3:36:f8:55:92:f1:9c:9c:6d:b2:29:a5:bd:58:ae:ec:a4:c7:
90:c6:70:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 20:11:09 2026 by rpki-client